tree b22be73b724b9171e5e1305205e3e17d5570a456
parent 4015e5868676aa8959faf7a2b3cca1fbab4ef5ac
author Dmitry Teselkin <dteselkin@mirantis.com> 1530779625 +0300
committer Dmitry Teselkin <dteselkin@mirantis.com> 1534414624 +0000

Fix CIS 2.2.1.2

Nessus requires that 'restrict' lines contain arguments in a specific order.

Non-compliant file(s)
---------------------
/etc/ntp.conf - regex '^[\s]*restrict[\s]+-4[\s][^:]' found
expect '^[\s]*restrict[\s]+-4[\s]+default[\s]+kod[\s]+nomodify[\s]+notrap[\s]+nopeer[\s]+noquery[\s]*$' not found in the following lines:
  15: restrict -4 default kod notrap nomodify nopeer noquery

Solution
--------
Add or edit restrict lines in /etc/ntp.conf to match the following:
  restrict -4 default kod nomodify notrap nopeer noquery
  restrict -6 default kod nomodify notrap nopeer noquery

Change-Id: Ie26b56d85c9e6aac1526f991c676e5cca75ef00d